CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12654 · Red Hat 19885 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 2,832| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43284 · Red Hat, Metasploit exploit modules | vulnerability 1 exploit 1 | high | 7.8 | 2026-05-07 |
| Dalfox Found-Action Deserialization RCE CVE-2026-45087 · Metasploit exploit modules | exploit 1 | — | — | 2026-05-07 |
| Apache ActiveMQ Improper Input Validation Vulnerability CVE-2026-34197 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules | vulnerability 2 exploit 1 | high | 8.8 | 2026-04-07 |
| Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability CVE-2026-31431 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules | vulnerability 2 exploit 1 | high | 7.8 | 2026-04-22 |
| OpenCATS Installer PHP Code Injection CVE-2026-27760 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-28 |
| WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CVE-2026-41940 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | — | 9.8 | 2026-04-28 |
| Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload CVE-2026-34413 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-22 |
| Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload CVE-2026-34414 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-22 |
| Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload CVE-2026-34415 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-22 |
| Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload CVE-2026-41459 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-22 |
| Flowise CSV Agent Prompt Injection RCE CVE-2026-41264 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-22 |
| Paperclip AI RCE using a chain of six API calls (CVE-2026-41679). CVE-2026-41679 · Metasploit exploit modules | exploit 1 | — | — | 2026-04-10 |
| Supsystic Contact Form Wordpress Plugin SSTI RCE CVE-2026-4257 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2026-03-30 |
| Langflow Code Injection Vulnerability CVE-2026-33017 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2026-03-20 |
| Gogs Git Rebase Argument Injection RCE CVE-2026-52806 · Metasploit exploit modules | exploit 1 | — | — | 2026-03-17 |
| WordPress Unauthenticated RCE via Pix for WooCommerce plugin CVE-2026-3891 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2026-03-12 |
| AVideo Encoder getImage.php Unauthenticated Command Injection CVE-2026-29058 · Metasploit exploit modules | exploit 1 | — | — | 2026-03-05 |
| Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-20079 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | vulnerability 2 exploit 1 | — | 10 | 2026-03-04 |
| Ghost CMS Remote Code Execution CVE-2026-29053 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2026-03-02 |
| Ghost CMS Remote Code Execution CVE-2026-22594 · Metasploit exploit modules | exploit 1 | — | — | 2026-03-02 |
| FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass CVE-2026-28289 · Metasploit exploit modules | exploit 1 | — | — | 2026-03-01 |
| FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass CVE-2026-27636 · Metasploit exploit modules | exploit 1 | — | — | 2026-03-01 |
| openDCIM install.php SQL Injection to RCE CVE-2026-28515 · Metasploit exploit modules | exploit 1 | — | — | 2026-02-28 |
| openDCIM install.php SQL Injection to RCE CVE-2026-28516 · Metasploit exploit modules | exploit 1 | — | — | 2026-02-28 |
| openDCIM install.php SQL Injection to RCE CVE-2026-28517 · Metasploit exploit modules | exploit 1 | — | — | 2026-02-28 |
Facets
Source 98717 of 98717 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22689
zetlyn/cve-nvd19161
zetlyn/cve-ghsa5730
zetlyn/cve-kev1731
Exploited 1731 of 98717 claims
yes1731
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10